ETWProcessMon2 is for Monitoring Process/Thread/Memory/Imageloads/TCPIP via ETW + Detection for Remote-Thread-Injection & Payload Detection by VirtualMemAlloc Events (in-memory) etc.
Why do you think that https://github.com/ReClassNET/ReClass.NET is a good alternative to ETWProcessMon2